GitHub Advisoryadvisory · npm

GHSA-hg78-c92r-hvwr Denial of Service in mqtt

HIGH Published 2020-09-01 Modified 2021-09-23 Official page ↗
Aliases
CVE-2016-1000242
Ecosystem
npm
Packages
mqtt
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-248
Reviewed
2020-08-31

Affected packages

• npm mqtt: < 1.0.0 → fixed in 1.0.0

Description

Affected versions of `mqtt` will cause the node process to crash when receiving specially crafted MQTT packets, making the application vulnerable to a denial of service condition. Recommendation Update to v1.0.0 or later

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-248 Uncaught Exception weakness

References